Public bug reported:
Ubuntu 18.04.1 LTS
gdm3:
Installed: 3.28.2-0ubuntu1.4
Candidate: 3.28.2-0ubuntu1.4
Version table:
*** 3.28.2-0ubuntu1.4 500
500 http://us.archive.ubuntu.com/ubuntu bionic-updates/main amd64
Packages
500 http://security.ubuntu.com/ubuntu bionic-security/main amd64
Packages
100 /var/lib/dpkg/status
3.28.0-0ubuntu1 500
500 http://us.archive.ubuntu.com/ubuntu bionic/main amd64 Packages
When switching between TTYs or sessions via the Alt+Function
keybindings, you can briefly display all entered passwords from the GDM
password box. When I was switching from a TTY to my active GNOME Shell
session, I accidentally pressed `Alt`+`F1`+`F2` at the same time instead
of just `Alt`+`F2`, and when I did this, a black screen with text
appeared for a second or so that displayed everything that had been
entered into the GDM password box, regardless of which user it was. I
believe this may be problematic on multi-user systems. I tried to take a
picture but the quality is subpar as I had to handle the camera and
press the keys at the same time to capture (
https://photos.app.goo.gl/8k5voYWcvK424xp59 ) The intentionally blurred
area is where the passwords/entered text was shown.
ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: gdm3 3.28.2-0ubuntu1.4
Uname: Linux 4.18.7-041807-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.3
Architecture: amd64
CurrentDesktop: ubuntu:GNOME
Date: Mon Sep 17 05:12:33 2018
InstallationDate: Installed on 2018-09-15 (2 days ago)
InstallationMedia: Ubuntu 18.04.1 LTS "Bionic Beaver" - Release amd64 (20180725)
ProcEnviron:
TERM=xterm-256color
PATH=(custom, no user)
XDG_RUNTIME_DIR=<set>
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: gdm3
UpgradeStatus: No upgrade log present (probably fresh install)
** Affects: gdm3 (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug bionic
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gdm3 in Ubuntu.
https://bugs.launchpad.net/bugs/1792924
Title:
Passwords entered in GDM can be displayed when switching TTYs
Status in gdm3 package in Ubuntu:
New
Bug description:
Ubuntu 18.04.1 LTS
gdm3:
Installed: 3.28.2-0ubuntu1.4
Candidate: 3.28.2-0ubuntu1.4
Version table:
*** 3.28.2-0ubuntu1.4 500
500 http://us.archive.ubuntu.com/ubuntu bionic-updates/main amd64
Packages
500 http://security.ubuntu.com/ubuntu bionic-security/main amd64
Packages
100 /var/lib/dpkg/status
3.28.0-0ubuntu1 500
500 http://us.archive.ubuntu.com/ubuntu bionic/main amd64 Packages
When switching between TTYs or sessions via the Alt+Function
keybindings, you can briefly display all entered passwords from the
GDM password box. When I was switching from a TTY to my active GNOME
Shell session, I accidentally pressed `Alt`+`F1`+`F2` at the same time
instead of just `Alt`+`F2`, and when I did this, a black screen with
text appeared for a second or so that displayed everything that had
been entered into the GDM password box, regardless of which user it
was. I believe this may be problematic on multi-user systems. I tried
to take a picture but the quality is subpar as I had to handle the
camera and press the keys at the same time to capture (
https://photos.app.goo.gl/8k5voYWcvK424xp59 ) The intentionally
blurred area is where the passwords/entered text was shown.
ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: gdm3 3.28.2-0ubuntu1.4
Uname: Linux 4.18.7-041807-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.3
Architecture: amd64
CurrentDesktop: ubuntu:GNOME
Date: Mon Sep 17 05:12:33 2018
InstallationDate: Installed on 2018-09-15 (2 days ago)
InstallationMedia: Ubuntu 18.04.1 LTS "Bionic Beaver" - Release amd64
(20180725)
ProcEnviron:
TERM=xterm-256color
PATH=(custom, no user)
XDG_RUNTIME_DIR=<set>
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: gdm3
UpgradeStatus: No upgrade log present (probably fresh install)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1792924/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
